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(57) Abstract 

A device for 
controlling electronic gaming 
machines comprises a single 
board computer (SBC) 
having a microprocessor, 
memory means, storage 
means and a ROM (Read 
Only Memory). The ROM 
includes: a loader program; 
verification program; an 
authentication program; 
and a presentation program. 
Additional Mass storage 
media in communication with 
the SBC store pre-verified 
and approved gaming 
software (program files) and 
related data files, each of 
which have a verification 
signature appended to them. 
Prior to usage of the gaming 
software, the program file 

S £jSL?iJlL and checked by the verification program which compares the verification signature with , aj >ewly, calcukted 
verificrtkm signature If foe newly calculated signature matches the verification signature, the requested file is deemed to be intact (a 
^SSThSS^nc verification processes ensure that the file has been retrieved in its entirety and is free from com.pt.on caused by 
2^mSfLTlf^5 corruption has occurred, the control device displays an error and the process is halted After vacation 
aHndtof^S for authorization from authentication agents are processed by a queuing means. Each ^ £ 
auDSScTinstructions and a reply destination. After queuing, an authentication interpreter processes the 

*e ra uSX S The presentation program reports the resulting authentication identificatton to foe requested d«tmaUOT winch 
^S^I^tlaL aLentication%%cknowledged. the image is used or executed. If refused, an error . delayed and the 
process is halted. 
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SOFTWARE VERIFICATION AND AUTHENTICATION 

Background of the Invention 

This invention relates to ensuring the compliance, integrity and 

authenticity of microprocessor-based gaming devices utilized in regulated 
5 gaming jurisdictions. These devices are commonly referred to as slot 

machines or video poker machines; however, more recent implementations 
. have combined both aspects and offer a variety of games on a single machine 
referred to as a multi-game machine. A commonly configured multi-game 
machine would include a plurality of games such as: keno, poker, slots, 
10 blackjack and others. These games can be played separately or be combined 
together to form new games, games within games, thus pushing the limits of 
gaming software and hardware capabilities. As the complexity of these 
gaming devices increases, the difficulty of ensuring regulatory compliance 
increases. 

15 Typical gaming machines of this type utilize a combination of 

mechanical devices, electronics, microprocessors and complex software to 
generate the gaming experience. Some of the common hardware components 
include a cabinet, handle, jackpot tower, coin acceptor, bill acceptor, credit 
meters, back-lit glass, reels, monitors, game doors, buttons, payout hoppers, 

20 lights and speakers. The electronics include many of the following 

components: microprocessor, (also referred to as a central processing unit 
("CPU")), read only memory (ROM), random access memory (RAM), high 
speed data bus, peripheral logic chips for serial and parallel ports and driver 
circuitry for lamps, speakers, video and other devices. Typical software 

25 components include: power-up initialization, device drivers, game recovery, 
state machines (to monitor whether the game is in a state of active play, 
"sleeping" between active play or off), random number generator, payout 
routine, credit management, graphics engine, sound, game engine, game data, 
security, accounting and reporting functions. 

30 In jurisdictions where gaming is legal, use of such gaming devices is 

regulated by law. This invention is designed to aid in complying with two 
kinds of gaming regulations: those requiring automated verification of the 
device's integrity, and those requiring a method of determining the 
authenticity of the device. 

35 As will be described below, verification and authentication are . 

separate processes. Verification of the gaming software is usually performed 
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which use ROM type storage; and which typically are stand-alone gaming 
machines. However, with the advent of new storage technologies, increased 
storage requirements of modern operating systems, and multi-game 
multimedia gambling devices involving a plurality of gaming machines in 
communication with each other, the prior art methods are no longer 
sufficient 

And though Silicon Gaming has invented a method for 
"authenticating" software stored in other media, it ignores the existing 
authentication paradigm presently accepted in gaming. Thus, there is a need 
for a means of verifying and authenticating software stored in modern media 
that is compatible with existing gaming regulations arid practices. It is also 
believed that such methods should take into account the practice of relating 
software and modular functionality to EPROMS like prior art systems. The 
industry is comfortable with having a set of EPROMS for "System" software 
and a set for each model (comprising unique pay schedule, symbols, and/or 
play rules), or a set for each game in a multi-game environment. It is further 
thought that remote authentication is desirable to said agencies. Lastly, it is 
thought that a method of authentication that does not require the removal of 
gaming software from the machine is desirable to the operator. 
Summary of the Invention 

It is an object of the present invention to provide a device for use 
within a gaming machine, such as a slot machine or a multi-game machine, 
which allows for continuous verification of gaming software stored in 
modern media in a manner consistent to that which occurs in EPROM based 
prior art systems. 

Still another object of the present invention is to provide a device for 
use within a gaming machine, such as a slot machine or a multi-game 
machine, which allows for verification of data files. 

Still another object of the present invention is to provide a method 
that can be used within a gaming machine, that will allow software 
authentication without requiring the removal of gaming software (program 
files) from within the gaming machine. 

Still another object of the present invention is to provide a method 
that allows for authentication of the gaming software (program files) without 
requiring removal of the central processing unit from the gaming machine. 

Still another object of the present invention is to provide a method 
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that allows for authentication of the gaming software (program files) from a 
remote location. 

Still another object of the present invention is to provide a method 
that allows for authentication of the gaming software (program files) 
5 according to specifications set forth by the I 2 C. 

Still another object of the present invention is to provide a method 
that allows for authentication of the gaming software (program files) from 
within the gaming machine. 

Still another object of the present invention is to provide a method 
10 that can be used within a gaming machine, that will allow data file 

authentication without requiring the removal of the data files from the 

gaming machine. xU a 

Still anotheT object of the present invention is to provide a method 

that allows for authentication of the data files without requiring removal of 
15 the central processing unit from the gaming machine. 

Still another object of the present invention is to provide a method 

that allows for authentication of the data files from a remote location. 

Still another object of the present invention is to provide a method 

that allows for authentication of data files according to specifications set 

20 forth by the I 2 C. 

Still another object of the present invention is to provide a method 
that allows for authentication of the data files from within the gaming 
machine. 

Still another object of the present invention is to provide a method or 
25 relating gaming software stored in non-EPROM media as if it were embodied 

in EPROM media. 

Still another object of the present invention is to provide a method of 
configuring gaming software stored in non-EPROM media as if the software 
were embodied in EPROM media. 
30 Still another object of the present invention is to provide a method of 

reporting gaming software stored in non-EPROM media as if the software 
were embodied in EPROM media. 

Still another object of the present invention is to provide a method of 
verifying gaming software stored in non-EPROM media as if it were 
35 embodied in EPROM media. ' 

Still another object of the present invention is to provide a method of 
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authenticating gaining software stored in non-EPROM media as if it were 
embodied in EPROM media. 

Still another object of the present invention is to provide a method of 
representing gaming software stored in non-EPROM media as if it were 
embodied in EPROM media. 

Still another object of the present invention is to register the agent 

making the authentication request. 

The present invention is a control system for electronic gaming 

machines which comprises a control means having a microprocessor, 
memory means, storage means, a means for operating the gaming machine, a 
plurality of program means and a plurality of data means, a ROM (Read Only 
Memory), a plurality of input/output means, a means for receiving power and 
a means for supplying power. The ROM includes means to verify and 
authenticate the program means and the data means, in response to a request 
from a requesting agent, which is external to the control system. The 
requesting agents can be located externally with respect to the gaming 
machine, or can be located within the gaming machine. The verification and 
authentication means include a loader program, a verification program, an 
authentication program, and a presentation program. Mass storage media in 
communication with the control means store pre-verified and approved 
gaming software (program files) and related data files, each of which has a 
unique verification signature (or identification means) appended to them. 
Prior to usage of the gaming software, a program file or data file is retrieved 
by the loader program and checked by the verification program, which 
compares the verification signature with a newly calculated verification 
signature. If the newly calculated signature matches the verification 
signature, the requested file is deemed to be intact (a validated image). The 
verification process ensures that the file has been retrieved in its entirety and 
is free from corruption caused by storage media faults. The control system 
also includes means to control the operation of the verification program and 
the gaming machine, depending on the outcome of the verification program 
and the authentication program, respectively. If any corruption has occurred, 
the control device displays an error message and the verification process is 
halted. After verification, all pending requests for authentication from 
authentication agents (requesting agents) are processed by a queuing means. 
Each request includes a set of authentication instructions and a reply 
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destination (a responder means,. The responder means .s extern* «c ,£ 
control system, and can be situated either externally w.th respect to the 

atng machine, or internally in the gamins machine. After qo»* « 

urLntication interpreter processes the validated image pursuant * to 
"Ister-s instruction. The presentation program reports the result^ 
automation identification to the requested destination whrch ettor 
al"dses or refuses authorization. H acknowledged the image „ used, 
if refused an error is displayed and the process is halted. 

The present invention offers a number of benefits. First the P re«m 
invention allows one or more external authenticating agents to perform &e 

aTentication proC es, This results in better accountabrhty to regvjatory 
uLties because to manufacturer is not certifying tts ~— * 

Second, each authenticating agent can use its own method (or multiple 

7 Further to same system can be used by to software 

1 f r^dun^ to soflare release and/or upgrade process to ensur* 

machine. This method is capable of distinguishing between medra 

Option and deliberate tampering «^"-*^.*£ a ~ 

. • r^ a cnftware could also be detected if each 

^Iv^OM^irtual Programmable Read Only Memory, Registry aids 
in ,he retrieval and management of related stored binary information by 
SftP^ terete data and program entities together as .f toy were 

conformation used in to management, retrieval ° f 
related programs and data sets. In prior art gaming mventions, related 
pirns 1 data are typically stored in the same ™ set In sue* 
LLtions, it is not uncommon to find a dozen system tasks or more stored 
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in the same EPROM set -- a set is typically comprised of two EPROMS, the 
first containing the data stored in the odd- numbered addresses and the 
second containing the data stored in the even-numbered addresses. 
However, when using general purpose storage media such as a hard drive, the 
5 tendency, due to modern operating system design, is to store each process, 
task and data set as a separate discrete file. Using modular development 
techniques, it is not unusual to have thirty or more processes and several 
dozen data images stored on a hard drive in the form of files. Authentication 
of prior art systems is easily accomplished, being done at the EPROM level, 
10 resulting in one authentication id for each EPROM, a typical gaming device 
having one to twelve EPROMS. Whereas, the job of authenticating one 
hundred plus discrete files on a hard drive is a much more difficult and error- 
prone task. In order to maintain the same kind of one-to-many grouping 
characteristics naturally occurring in ROM style media, a relational database 
15 directory was designed to store logical EPROM-like grouping information, 

termed the V-PROM Registry. The Registry contains the location and media 
type of related stored programs and data sets, each group having a unique V- 
PROM name. As an added benefit, the V-PROM Registry abstracts the type of 
storage media from the authentication process thus allowing for the use of a 
20 wider variety of storage media. 

The final step of the software installation phase is to update the 
directory of installed software in the V-PROM Registry, noting the images' 
storage locations, media types and defining logical groupings for related 
programs and associated data. 
25 V-PROMS are logical containers that contain software and related data. 

V-PROMS can also contain other V-PROMS, thus, a given software 
configuration can be stored as a V-PROM containing a series of "smaller" V- 
PROMS which describe all of the software games to be installed for a specific 
operator/casino installation. Subsequently, by authenticating the "parent" V- 
30 PROM, the whole software installation can be verified. 
Brief Description of the Drawings 

The invention will be better understood by a Detailed Description of 
the Invention, with reference to the drawings, of which: 

Figure 1 is a schematic diagram of the device of the present invention 
35 and related hardware components; 

Figure 2 is a block diagram providing a conceptual overview of the in- 
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factory software installation process and the in-field software verification and 
process in B «ater detail than outlined in Figure 2 

because of the modular nature of Un des.gn. T P ^ ^ 
control system 10 for a gaming machine. The gaming 
Tut can be either a s.ot machine, a video poke, : m.chm, o newer^ ^ 
cementation which has combine , aspects ^ ^ 
offers a variety of games on a single niach.n referred 

of tni^e utiLe a combination of mechanical devices, electronics 

Some of me common hardware , bad ,Ut 

handle, jackpot tower, coin accepto bUl acc^pto ^ 

m odule is a commercially available «-^^^ ( ^ 8 ^ 

Module 60 represents commercially avertable storage me 

70 is a commercially available power supply. T ^° U ™~ CB ,,, A 

«ve components are in electee — — cable, or a SCSI 

connects to ^^^f^ „ connected to the .OCB BO 
cable in me case £ gQ ^ . steckable KW Plus 



WO 99/65579 



PCT/AU99/00486 



communication with each other. The microprocessor (or CPU) 12 is a x86 
CPU such as a Pentium™ or Pentium n™ processor with MMX™ or 
equivalent technology. CPU 12 is in communication with a high speed 
processor cache 14 for improved performance; glue logic chips 16 for driving 
high speed data busses and interfacing the processor 12 to other high speed 
components such as RAM, video processors, network chips, and I/O boards, 
High speed RAM sockets' 18 typically DIMM or SIMM (Dual Inline Memory 
Module or Single Inline Memory Module, respectively) style; an integrated 
high speed network interface 20, such as, but not meant to be limited to, an 
Ethernet network connection; a network interface connector 22; an integrated 
high speed video processor, 24 video monitor connection; 26 are also 
components of the Single Board Computer 10. Other components of the SBC 
include power connector 28; a custom peripheral I/O cip 30 for driving a 
plurality of serial VO, parallel I/O; and a disk subsets such as EIDE or SCSI! 
A plurality of EIDE or SCSH storage media connectors; 32, a plurality of serial 
and parallel I/O connections 34; an integrated sound chip 36; sound 
connection 38; and (9) stackable PC104 Plus connector 40 are also 
components of the SBC. It is important to note that this invention is not tied 
to a specific SBC or manufacturer. This is accomplished through the use of a 
general purpose operating system (OS) and a method of hardware 
abstraction. The manner of hardware abstraction is described in NuGame's 
patent application, Serial No.60/094068, for an I/O Interface and Device 
Abstraction, filed 24 July 1998, 1998. Thus, the present invention treats the 
SBC as a component which can be swapped or upgraded as new boards 
become commercially available. 

The second module, also referred to as storage media module 60, 
represents the use of general use purpose mass storage media. The media 
represented in storage media module 60 can include: Hard disk drive units, 
CD-ROMs (Compact Disk-Read Only Memory), solid state storage devices, or 
other storage media used in the Personal Computer (PC) industry. This 
media is connected to the SBC through a PC industry standard interface such 
as EIDE, SCSH, or PCMCIA interface 62. Where spinning media is used, i^, 
a hard disk drive unit, a CD-ROM drive unit, or a Digital Video Disk (DVD) 
drive unit, as examples, reference numeral 64 represents a drive spindle. 
Other elements that may be unique to a particular type of mass storage ■. 
medium are not shown. Storage media 60 may also represent a file server 
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connected to the control system. Although the present invention can 
taction without mass storage, it is specifically designed to qta> the 
advantages of such devices. 

advantag Control Board 80 is interfaced to the SBC through a 

stackaMe PC-104 Plus connector. This board is response for interfacing ; o 
Tot the machine components utili 2 ed in a gaming device. Thts board also 
functions as a bridge to other intelligent VO devices attached to to* C 
network a. 84, an interface connection. Reference numeral 86 ,nd,ca«s a 
connector which connects the IOCS 80 with power supply 70 (A defied 
description of the 10CB 80 is found in patent trf^*^™*^ 
for an Intelligent Input/Output Control System, Med 18 May, 1998. 

Thus the SBC and the lOCB 30 direct the operation of the venous 
displays, controls, video, sound, and other peripherals of the gaming 
machine. The operation of SBC, lOCB 80 and the gammg machmef ) .a 
Erected by p Jality of program files stored within the memory of the 

^""IcaTon and authentication program included in tire present 
invention has enhanced media verification, program/data management and 
authentication capabilities. These attributes enable the control system to 
be^r man ge the large volume of softwa* and data normally assocated 
"lu 8 U saming device while ensuring *e compliance^ .nfcgnty 
and authenticity of each component In addition, tins mvention also 
^antny aids in the reduction of software configuration errors that tend 
to accompany a device of this complexity. 

7L 2 is a diagram of a conceptual overview of the vesication and 
authentication program 199. This verification and authentication prograrn 
99 rlquely distinguished by interactions of three major components and 
to melds contained therein: a Loader 226 with media ^cation 
ZL a data/program directory 228 termed "V-PROM Registry" (Virtual 

The Loader 226 functions to retrieve and verify the integnty of data and 

on a wide variety of media such as 
CD-loMS, flash disks, meser^rs, other ROMs such as PROM or 
The V-PROM Registry 228 aids in the retrieval and management of related 
Tred 'mary information by .ogically grouping discrete data -program 
Z£» ^ together. Contained within V-PROM Registry 228 are other program 
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files which include relational database and directory functions to perform 
this logical grouping of the program files and data files. The Authentication 
Engine is responsible for calculating and reporting authentication 
identifications (ids) according to instructions found in the pending 
authentication requests that are associated via V-PROM registry to the 
programs and related data being loaded. All three of these components 
interact in order to carry-out requests for authentication as showrJ in Figure 
2, and further described below. 

The verification and authentication process to verify the integrity of 
the images being retrieved by the gaming software is a two-phase process and 
illustrated in Figure 2. The first phase, data/program preparation is 
accomplished by the In-Factory Software Installation Process 200. As its 
name suggests, the In-Factory Software Install Program is performed at the 
factory where the gaming machine is produced, prior to shipment The 
second phase, software retrieval and verification process 220 is accomplished 
in the field by the Loader and Media Signature Verification routines located 
in the EPROM based Control Program stored on SBC. This phase verifies the 
integrity of the installed media, to make sure the program files and data files 
contained therein have not been damaged by faulty or defective storage 
media. 

The first phase of the Software Installation configuration verification 
process 199 is an in-factory phase (also referred to as the data preparation 
phase 200) and is comprised of installing each processed program or data file 
202 utilizing a Media Verification Signature Utility program 204. The media 
verification signature utility can be chosen from any one of a number of 
verification programs known to those skilled in the art. The output of this 
utility is a media verification signature 203. This signature 208 is calculated 
using either a cyclic redundancy check or a check sum using one of two 
common methods known to those skilled in the art. The complement 210 of 
the signature is appended to the end of its associated program or data set 206. 
The process is repeated for each program to be installed. Programs 208 are 
then installed on the recipient storage media 60. From storage media 60, the 
processed data and programs are transferred to the loader 226 for transfer to 
memory within the EPROM on SBC. The final step of the Installation phase 
is to update the directory of installed software in the V-PROM Registry 228, 
which notes the images' storage locations, media types and defines logical 
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authentication agents, if detected, me, represented, 
authentication registry --f-.'T*^ is notedflogged 
password if pre-registered and required * e ™ ".^^ ^ regi5tered - 

ag e„t can request that an *~«™ «*° 

allowing for a person (acting as an agent) toreque ^ ^ ^ 

laptop computer which acts as a P connection so that two 

such as presenting authentication ,ds vku ^ n ^°~ 0 „ Ush ^ 

, J™ 10 bv the in-factory install process 200, and the garmng 
control ^^^^Z^ and being installed, or being 

files) to d«ktt of M defecbve media . 

^e—on step 1 be subdivided into the following steps, as 
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outlined in Figure 2. Whenever there is a request for a V-PROM, program or 
data set, such as may occur when a player activates the gaming machine to 
initiate game play the Loader routine 276, references the V-PROM Registry 
228 and the loader routine 226 accesses the storage media and places the 
requested binary image of the data requested program file 208 in the CPU\12's 
main memory. The Media Signature Verification routine 230 then applies 
the same algorithm used -in the data preparation phase- (204) to.the loaded 
image 208 which has an appended complimentary signature 211. Thus, 
using the check-sum method of verification, and due to the cancellation 
effect of previously appending the complement of the verification signature, 
the resulting check-sum value at 232 should be zero when processed again by 
the same algorithm. A non-zero result at 348 would indicate that the 
retrieved binary image was corrupted by a media fault resulting in the 
issuance of a command to halt the operation of the gaming device at 248. A 
result of zero at 232 indicates that the image has been wholly retrieved 
without corruption, and depending upon the priority commands given with 
the initial request, this information is placed in a queue and awaits 
authentication at 234. If the initial request included a priority command, the 
requested program is not queued, and can be executed or used immediately 
at 220. 

If the verification method shows that the integrity of the media is 
intact, the authorization program is initiated. The second major component 
in the present invention is the V-PROM Registry 228. The V-PROM Registry 
228 is a program data directoiy which provides crucial information used in 
the management, retrieval and authentication of related programs and data 
sets. In prior art gaming inventions, related programs and data are typically 
stored in the same EPROM set. An EPROM set is typically comprised of two 
EPROMS, the first containing the data stored in the odd numbered addresses 
and the second containing the data stored in the even numbered addresses. 

In such prior art inventions, it is not uncommon to find a dozen 
system tasks or more stored in the same EPROM set. 

Authentication of prior art systems is easily accomplished because it is 
done at the EPROM level, resulting in one authentication id for each EPROM, 
with a typical gaming device having one to twelve EPROMS. However, the 
newer gaming devices use general purpose storage media such as a hard 
drive, where the design of modern operating systems causes each process, 
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task and data set to be stored as a separate discrete file. Using modular 
development techniques, it is not unusual to have thirty or more processes 
and several dozen data images stored on a hard drive in the form of files as a 
result. Thus, the job of authenticating one hundred plus discrete files on a 
hard drive is a much more difficult and error prone task than authenticating 
tasks stored on EPROMS. In order to maintain the same kind of one-to-many 
grouping characteristics naturally occurring in ROM style media, 'a relational 
database directory was designed to store logical EPROM-like grouping 
information, termed the V-PROM Registry 228. Thus, the V-PROM is 
programmed to determine which program files and which data files are 
related, and to group them in a logical manner. This grouping program 
emulates the grouping methods that are characteristically found in ROM-type 
media, including ROMs, PROM. EPROM or EEPROM. The Registry contains 
the location and media type of related stored programs and data sets, each 
group having a unique V-PROM name. As an added benefit, the V-PROM 
Registry 228 abstracts the type of storage media from the authentication 
process thus allowing for the use of a wider variety of storage media. The 
third major component of the present invention is the Authentication Engine 
which is distributed into several smaller-routines as shown in Figure 2. The 
Authentication Engine only acts upon authentication requests received from 
registered agents, a registered agent being an individual, a floor supervisor, 
system engineer or inspector authorized by a regulatory agency, the software 
manufacturer, the gaming machine manufacturer, authorized to perform the 

authentication process. 

The software which controls the functioning of the present invention 
is stored in three different places. EPROM (42) contains the Control Program 
220 illustrated in Figure 2. Storage device (44) contains the BIOS in control 
system 10. (Basic Input/Output System) and Operating System (OS) software 
(Figure 1). The type of storage device (44) varies from SBC to SBC, 
depending upon the manufacturer; in some cases the BIOS and Operating 
System software are stored in two separate devices in electronic 
communication. Software games (program files) and data (data files) are 
stored on Storage device 60. In some configurations, game software can be 
stored in a series of EPROMS attached to the PC-104 Plus bus 142 on the 
Non-volatile RAM module 90. In other configurations, game software can be 
stored on a file server attached to the network via connector 32. The file 
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server is not shown in the figures. 

EPROM 42 contains the following software components (Figures 3A 
and 3B) software component 304C (the I 2 C driver) is the driver to interface to 
the 10CB 80. Reference number 224 is an authentication requester queuing 
routine (see Figure 2 also). The data loader routine and a media verification 
routine is shown at reference number 226. The authentication interpreter is 
reference number 236, and it communicates with authentication presentation ' 
routine 240. Serial driver 304A and Network Driver 304B are part of the 
Operating System stored in the device 44 of the SBC. 

Three of the authentication requestors 222, the serial connected 
authentication requestor 222A, the network connected authentication 
requestor 222B, and the I 2 C connected authentication requestor 222C are 
located externally with respect to the control system 1, shown in Figure 1. 

Similarly, several of the authentication responders, the serial 
connected authentication responder 242A, the network connected 
authentication responder 242B, and the I 2 C connected authentication 
responder 242C, are externally located with respect to the control system 10 
shown in Figure l; the internal authentication request to 223 and the internal 
authentication responder 243 are optional, used by the manufacturer for 
internal authentication and stored in mass storage device 60. 

An overview of the verification arid authentication process 220 is 
presented in Figure 2 and described in the following few paragraphs. Figures 
3A/3B describes the authentication process in greater detail. Identical 
reference numbers in Figure 2 and Figures 3A/3B correspond to an identical 
step in the process. For this reason, the reader should follow both Figures 2 
and 3A/3B, as appropriate. Referring to Figures 3A/3B, requests are emitted 
by the external requesting agents 222 A-C which are in electronic 
communication with the present invention and transmitted to the 
authentication requestor queuing agent 224. Each of the connected 
authentication requestors, le,, the serial connected authentication requestor 
222A, the network connected authentication requestor 222B, and the I 2 C 
connected authentication requestor 222C issue a request which is handled by 
serial driver 306A. As shown in Figures 3A and 3B, similar requests and 
drivers handle the other authentication requestors 222B and 222C. The ^ 
optional internal authentication requestor 223 communicates directly with 
the authentication requestor queuing agent 224 by generating its own IPC 
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236. The Authentication Interpreter 236 processes 1 to 

each binary word of data compnsmg ^ AothenUcati on 
resulting value is termed the ^"^0^ 238 to one of the 
Presenter 240 then reports the generated desi ^ 
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conveyed or manually entered by a field Agent. 

Each individual authentication requestor (an agent) is initially 
registered with the system via a registration Inter-Process Communication, 

IPC, message 308. 

The authentication queuing agent 224 cross examines the IPC request, 
checking the IPC message 308 for formatting errors. Properly formatted 
messages 348 are stored in the authentication request queue 234 and then 
acknowledged via a return IPC message. Errant requests (Le,, IPC messages 
that are improperly formatted or contain other errors detected by the 
authentication queuing agent 224) are also reported to the initiating requester 
(through a return IPC Message - not depicted). If the request is flagged for 
immediate processing 310 because it contains coding indicating it is be 
processed immediately, the loader 226 is informed via an IPC message 312. 
The loader 226 accesses the request stored in the queue 234, then, at 314 
retrieves the requested V-PROM image 228A according to the registry 228 
given, from storage media 228A. The authentication interpreter 236 is called 
via an IPC message 320 and processes the V-PROM image retrieved 228A 
using the request math instructions (algorithm) stored in the queue 234. The 
resulting authentication id 238 (Fig. 2) is sent from authentication interpreter 
236 (Fig. 3B) via IPC message 322 to the authentication presenter 240. The 
presenter 240 routes the id to the responder agent 242, either the serial 
connected authentication responder 242A, the network connected 
authentication responder 242B, the I 2 C connected authentication responder 
242C, or the optional internal authentication responder 243 as designated by 
the contents of the queued request at 234. The responder 242A-C, or 243 
sends either an approval or denial response back to the presenter 240. The 
IPC message 324 issued by the authentication presenter 240 is routed to the 
particular connected authentication responder (242A-C) by a corresponding 
driver (304A-C). Thus, as shown in Figs. 3A and 3B, serial driver 304A 
routes the IPC message and responds to serial connected authentication 
requestor 242A, the network driver 304B to 242B, etc. The internal 
authentication responder 243 receives its IPC message directly. 

If the request is approved by the responder at 244, 240 deletes the 
queued request and at 246 continues normal execution; if not approved, at 
252 the game is halted and an appropriate error message is displayed. The 
operation of the present invention can be illustrated by the following 
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example, involving an immediate authentication request for the "SYSTEM" 
V-PROM A subroutine of the authentication engine known as the 
Authentication Request Agent 222 would queue at 224 the request, signaling 
the loader 226 to retrieve the named V-PROM data/program group 228, in this 
example the "SYSTEM" V-PROM. The loader 226 retrieves and venfies the 
integrity of each component of the "SYSTEM" V-PROM at 230-234 handing 
off the verified data to the Authentication Interpreter 236. The 
Authentication Interpreter 236 computes an Authentication ID 238 for the V- 
PROM based on the instructions given in the request. The Authentication © 
238 is reported by the presenter 240 to an Authentication Responder 242A-C 
or 243 that was named in the queued request. The Authentication Responder 
242A-C or 243 either replies to the Presenter 240 that the id is authentic at 
244 or it replies that the id is not approved at 252. The Presenter 240, based 
on the response, either continues normal execution of the game at 246 or at 
252 halts the device, displaying an authentication error. This error will 
persist until the system is reset through a manual process performed at the 

device. ' 

It will be appreciated by persons skilled in the art that numerous 
variations and/or modifications may be made to the invention as shown in 
the specific embodiments without departing from the spirit or scope of the 
invention as broadly described. The present embodiments are, therefore, to 
be considered in all respects as illustrative and not restrictive. 
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CLAIMS: 

1. A control system for use with an electronic gaming device, the 

control system comprising: 

a control means in electronic communication with the gaming device, 

the control means including: 

a microprocessor means (a central processing unit ["CPU"]); 

a memory means;' 
a storage means; 

a means for operating the gaming device, the means for operating 
being stored in the memory means; 

the memory means and the storage means further including a plurality 
of program means and a plurality of data means, and a method to verify the 
integrity of the program means and the data means (the verification method); 

a plurality of input/output means; 

a means for receiving power; and 

a means for supplying power to the control system, the means for 
supplying power in electrical communication with the means for receiving 
power. 

2. The control system as described in Claim 1, wherein each program 
means and each data means includes an identification means, such that each 
program means and each data means is uniquely identified (an established 
identification means). 

3. The control system as described in Claim 2, wherein the control 
means further comprise a means for controlling one or more peripheral 
devices. 

4. The control system as described in Claim 3, further compressing a 
second means for controlling one or more peripheral devices, the second 
means for controlling peripheral devices in communication with the control 
means. 

5. The control system as described in Claim 3, wherein the first means for 
controlling peripheral devices is an Input/Output Control Board (IOCB). 

6. The control system as described in Claim 5, further comprising a 
means for storing non-volatile memory. 

7. The control system as described in Claim 6, wherein the storage means 
is chosen from the group consisting of a ROM, PROM, EPROM or EEPROM. 

8. The control system as described in Claim 7, wherein the verification 
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method further includes a method for grouping the program means that are 
re ated, and for grouping the data means that are re ated the method for 
E rouping emulating a method of grouping employed m storage medra. 
I Z control system as described in Claim 8, wherein to storage medra 
whose grouping method is emulated is chosen from the group of storage 
media consisting of ROM, PROM, EPROM or EEPROM. 
™T-1 ^em as described in Claim 9, wherein tire verification 
Z^Zr indudes a method of abstracting the location of the program 
means the data means and the storage means. . 
^ The control system as described in Claim 10, wherein the venficafcon 
"ethod, further includes means to compare the identification .mean, .of the 
"nested program means or of the requested data means to the estabhshed 

meUroTfurther indudes a method of controlling the operation of the gammg 
ZL in response to the verification of integrity of the program means or the 

7 contn,. system as described in Cieim 12, wherein tocontiolling 
method indudes a means of halting the verification method rf the _ 
Wentification means of me requested program means or the requested daU 
mis does not match the established identification means of to program 

r Vnetntl ^Tni as described in Claim 13, wherein to verification 
method further includes a method to authenticate to retrieved program 
means or the retrieved data means. . 
I. The control system as described in Claim 14, where.n to conttol 
means effects to method to authenticate only after the mtegnty of the 
req'sted program means or to integrity of to requested data means has 

T The cLo, system as described in Cairn 1. wherein to method to 
verify the integrity of to program means and to data means furto^ 
includes a method to authenticate to program means and the data means, 
Z ^cation method being activated in response to signals recerved 

from a requesting means. 

T The control system as described in Claim ». wherein to requesting 

means is an authentication agent. 
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18. The control system as described in Claim 16, wherein the 
authentication agent is external to the control system and the gaming device, 
the authentication agent in communication with the control means. 

19. The control system as described in Claim 16, wherein an 
authentication agent is external to the control system and is within the 
gaming device, the authentication agent in communication with the control 

i 

means. 

20. The control system as described in Claim 17 or Claim 18, wherein the 
authentication method further includes a method for registering the 
authentication agents. 

21. The control system as described in Claim 18, wherein the signal 
received from the requesting means is an authentication request. 

22. The control system as described in Claim 1, wherein the control means 
further includes a means for receiving the authentication requests. 

23. The control system as described in Claim 1, wherein the 
authentication requests includes a signal to prioritize the authentication 
request. 

24. The control system as described in Claim 23, wherein the control 
means further includes a method to queue the authentication requests, when 
more than one authentication request has been sent from the authentication 
agents. 

25. The control system as described in Claim 24, wherein the control 
means further include a means of interpreting the authentication request. 

26. The control system as described in Claim 25, wherein the means of 
interpreting the authentication request includes a means of generating an 
authentication identification (id) of the requested program means or data 
means. 

27. The control system as described in Claim 26, wherein the control 
system further includes a responder means, the responder means being 
external to the control means and in electronic communication with the 
control means. 

28. The control system as described in Claim 27, wherein the control 
means further includes a presenter means, the presenter means 
communicating the generated authentication id to the responder means. 

29. The control system as described in Claim 28, wherein the control • 
means and the responder means include a method of determining if the 
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generated authentication id is authentic, the responder means comparing the 
generated authentication id to the request, the generated authentication id 
deemed authentic if the generated authentication id matches the request. 

30. The control system as described in Claim 29, wherein the generated 

5 authentication id is deemed not authentic if the generated authentication id 
does not match the request. 

31. The control system as described in Claim 29 and 30, wherein the 
control means further includes a means of controlling the operation of the 
gaming device in response to the determination of authenticity of the 

10 requested program means or the requested data means. 

32. The control system as described in Claim 31, wherein the controlling 
means includes means of halting the operation of the gaming device if the 
requested program means or the requested data means is deemed not 
authentic. 

15 33. The control system as described in Claim 31, wherein the controlling 
means includes means of continuing the operation of the gaming device if 
the requested program means or the requested data means is deemed 
authentic. 

34. The control system as described in Claim 9, wherein the storage means 

20 is a hard disk drive unit. 

35. The control system as described in Claim 9, wherein the storage means 

is a CD-ROM unit. 

36. The control system as described in Claim 9, wherein the storage means 
is a DVD unit. 

25 37. The control system as described in Claim 9, wherein the storage means 
is a file server. 

38. For use in an electronic gaming device, a method to verify the integrity 
of program means and the integrity of data means stored in a control system, 
the control system comprising: 
30 a control means in electronic communication with the gaming device, 

the control system including; 

a microprocessor means (a central processing unit ["CPU"]); 

a memory means; 

a storage means; 

35 a means for operating the gaming device, the means for operating 

being stored in the memory means; 
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the memory means and the storage means further including a plurality 
of program means and a plurality of data means, each program means and 
each data means having an identification means, such that each program 
means and each data means is uniquely identified (an established 

identification means); 

a plurality of input/output means; 

a means for receiving power; and 

a means for supplying power to the control system, the means for 
supplying power in electrical communication with the means for receiving 
power, the verification method comprising the steps of: 

sending a request from a requesting means to the control system; 

processing the request within the control system; 

retrieving a requested program means or a requested data means from 

the storage means; 

verifying the integrity of the requested program means or the 
requested data means by verification means which verify by comparing the 
identification means of the requested program means or the requested data 
means with the request, the integrity verified if the identification means 
matches the established identification means request; and 

controlling the operation of the gaming device in response to the 
verification of integrity of the requested program means or the requested data 
means. 

39. The method as described in Claim 39, further comprising the steps of 
halting the verification method of the identification means of the requested 
program means or the requested data means does not match the established 
identification means of the program means or the data means. 

40. The method as described in Claim 39, further comprising a method to 
authenticate the retrieved program means or the retrieved data means. 

41. The method as described in Claim 40, wherein the method to 
authenticate is effected only after the integrity of the requested program 
means or the integrity of the requested data means has been verified. 

42. The method as described in Claim 41, wherein the requesting means is 
an authentication agent. 

43. The method as described in Claim 42, wherein the method further 
includes a method for registering the authentication agent. 

44. The method as described in Claim 43, wherein the request includes a 
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verification request and an auftenticauon .request, 
r The meL as described in Claim 44, wherein the request further 
includes an authentication queuing request. 

« The method as described in Claim 45, wherein the request further 
includes reastiation means for the authentication agent. 
4 Z method as described in Claim 43, further including a method of 
abstracting the location of the program means, the data means, and the 

:r e TTe™»hodasdesc ri bedinClaim47,n J rthe r includingthestep 
de'te— which of the program means are related, and determining whrch 

the related progrcm means, and grouping the related data means. 
50 The method as described in Claim 49, wherein the groupmg step 
emulates a method of grouping employed in storage media chosen from the 
croup consisting of ROM, PROM, EPROM or EEPROM. 
fT The authentication method as described in Claim 50, wherem the 
control means further includes a means for queuing the authentication 

n™™* authentication method as described in Claim 51, further _ 
comprWng the step of queuing the authentication quests, when more than 
o r»rCucation request has been sent from the authentication agents. 
53 TnTlrenticaL method as described in Claim 52. wherem the 
control means further includes a means of interpreting the authentication 

25 m U ° The authentication method as described in Claim 53, further 
comprising the step of interpreting the authentication request 

55 aumentltion method as described in Claim 54. wherem the 

interpretation step includes the step of generating an authentication 

30 r^—ca tion method as described in Claim 55, wherein the 
control means further includes a presenter means, the presenter means 
communicating the generated authentication id to ,a -P°" d <" 
57 The authenticating method as described m Ctam 56, further 
comprising the step of determining if the generated authentication >d » 
authentic, the responder means and the control means companng the 
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generated authentication id to the request, the generated authentication id 
deemed authentic if the generated authentication id matches the request. 

58. The authentication method as described in Claim 57, wherein the 
generated authentication id is deemed not authentic if the generated 
authentication id does not match the request. 

59. The authentication method as described in Claim 57 or 58, further 
including the step of controlling the operation of the gaming device in 
response to the determination of authenticity of the requested program 
means or the requested data means. 

60. The method as described in Claim 59, wherein the controlling step 
includes halting the operation of the gaming device if the requested program 
means or the requested data means is determined to be not authentic. 

61. The method as described in Claim 59, wherein the controlling step 
includes continuing the operation of the gaming device if the requested 
program means or the requested data means is determined to be authentic. 
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